Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: d6nMMDU/+4srLD+IR+XWio8SVXs4g5p+tN00Mj/RMs0=
Subject key identifier: 4B:55:EB:39:ED:90:BF:B7:9E:67:EB:59:EE:1B:AE:92:CF:20:37:00
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3339DDBCFD08C2307414222ED8BAB9D32ABFD91B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139989.roa
Signing time: Sun 16 Aug 2026 05:49:28 +0000
ROA not before: Sun 16 Aug 2026 05:44:28 +0000
ROA not after: Sun 15 Aug 2027 05:49:28 +0000
asID: 139989
IP address blocks: 45.158.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:39:dd:bc:fd:08:c2:30:74:14:22:2e:d8:ba:b9:d3:2a:bf:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 16 05:44:28 2026 GMT
Not After : Aug 15 05:49:28 2027 GMT
Subject: CN=4B55EB39ED90BFB79E67EB59EE1BAE92CF203700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:af:1e:f6:e0:eb:4f:5e:78:3a:08:39:1c:
ba:e3:fb:0b:92:8f:28:8f:43:92:30:e2:55:7b:98:
84:05:9e:48:83:80:bb:e8:95:3b:18:1f:41:6b:80:
00:f4:70:2e:bd:6c:3a:21:6a:62:8d:21:1d:8b:78:
4f:e8:58:9e:9c:76:8f:d2:4c:34:d8:b9:29:cc:b0:
9d:e0:32:17:94:02:c4:73:28:33:e0:9a:09:fb:a3:
00:b9:c8:53:83:b2:17:8a:11:b6:fe:8e:9e:fc:73:
12:57:14:3e:0d:60:16:82:38:a9:12:49:f2:39:fd:
d1:2a:42:33:36:1c:78:f6:b4:21:db:93:5a:1c:90:
76:90:bf:5f:17:ba:07:a5:50:8b:f9:8f:ec:3f:5f:
14:47:49:b1:d3:99:af:84:74:5a:29:4a:2d:fa:9f:
69:c9:75:a8:0b:02:fb:b4:9e:3a:35:5d:32:f5:9b:
9a:ad:f6:e3:fe:3c:89:c1:67:0f:48:f5:0a:74:08:
88:30:8f:91:dc:d2:b7:a2:6b:40:09:15:94:cc:26:
21:08:8b:a5:44:dc:94:8d:b9:1d:d3:17:45:50:9a:
bc:14:06:b2:66:dc:bd:67:e5:c2:03:ac:db:09:6c:
09:85:2e:4b:3d:f1:2a:2c:d9:83:d2:f4:6a:d5:e8:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:EB:39:ED:90:BF:B7:9E:67:EB:59:EE:1B:AE:92:CF:20:37:00
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7e:61:65:89:8b:32:76:8b:3b:af:32:3d:86:83:57:56:0f:
27:86:5c:02:95:3f:03:ca:cc:20:e9:cd:71:7a:b9:55:72:8f:
5d:88:b8:58:56:80:d0:c8:29:4b:e9:44:2d:97:4d:12:ef:af:
0f:51:43:a1:6b:61:32:41:4b:eb:26:f6:97:34:3f:9d:1d:37:
0b:35:d0:9a:88:30:cb:20:d7:22:e7:fe:fd:ae:f1:88:c6:83:
fa:59:b3:6c:51:87:c2:dc:7b:29:41:1c:4c:a3:14:f2:69:51:
03:b1:8e:3a:65:a2:4a:c2:5b:02:e0:21:68:c8:1f:74:d7:12:
fa:36:23:00:f0:82:4d:9c:96:e0:30:d3:35:f5:29:8d:3e:0c:
53:be:b6:8b:47:1b:b8:91:1f:07:2b:24:03:a0:76:02:8b:57:
50:87:f9:3e:15:60:8d:10:d9:fa:d7:7c:1d:10:cd:3c:e2:31:
8c:de:4d:ca:d2:9d:62:6a:3f:ae:2f:ea:5f:3b:fb:7c:3b:72:
b0:a4:b0:e9:26:49:0b:02:2c:3e:4f:d3:b3:a2:04:dd:05:fa:
56:28:96:2d:ca:a6:c9:1b:77:5b:21:bc:09:57:40:56:fc:17:
4c:7d:4d:9e:2b:e3:48:da:43:0b:49:1b:e8:39:f5:ef:05:e7:
96:00:4a:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMzndvP0IwjB0FCIu2Lq50yq/2RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA4MTYwNTQ0MjhaFw0yNzA4MTUwNTQ5MjhaMDMxMTAvBgNV
BAMTKDRCNTVFQjM5RUQ5MEJGQjc5RTY3RUI1OUVFMUJBRTkyQ0YyMDM3MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhK8e9uDrT154Ogg5HLrj+wuS
jyiPQ5Iw4lV7mIQFnkiDgLvolTsYH0FrgAD0cC69bDohamKNIR2LeE/oWJ6cdo/S
TDTYuSnMsJ3gMheUAsRzKDPgmgn7owC5yFODsheKEbb+jp78cxJXFD4NYBaCOKkS
SfI5/dEqQjM2HHj2tCHbk1ockHaQv18XugelUIv5j+w/XxRHSbHTma+EdFopSi36
n2nJdagLAvu0njo1XTL1m5qt9uP+PInBZw9I9Qp0CIgwj5Hc0reia0AJFZTMJiEI
i6VE3JSNuR3TF0VQmrwUBrJm3L1n5cIDrNsJbAmFLks98Sos2YPS9GrV6F+RAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUS1XrOe2Qv7eeZ+tZ7huuks8gNwAwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTM5OTg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4K
MA0GCSqGSIb3DQEBCwUAA4IBAQALfmFliYsydos7rzI9hoNXVg8nhlwClT8Dyswg
6c1xerlVco9diLhYVoDQyClL6UQtl00S768PUUOha2EyQUvrJvaXND+dHTcLNdCa
iDDLINci5/79rvGIxoP6WbNsUYfC3HspQRxMoxTyaVEDsY46ZaJKwlsC4CFoyB90
1xL6NiMA8IJNnJbgMNM19SmNPgxTvraLRxu4kR8HKyQDoHYCi1dQh/k+FWCNENn6
13wdEM084jGM3k3K0p1iaj+uL+pfO/t8O3KwpLDpJkkLAiw+T9OzogTdBfpWKJYt
yqbJG3dbIbwJV0BW/BdMfU2eK+NI2kMLSRvoOfXvBeeWAEpi
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:03:45 2026 by rpki-client